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AMENDMENTS TO THE CLAIMS 

The listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1. (Previously Presented) In a network environment that includes a public 
network and a private network, the public network including a client external to the private 
network, a method of a commimications device of the external client establishing a secure 
connection over a public network to the private network without restricting the communications 
device to working through the private network, the method comprising the following: 

a specific act of the external client establishing a connection with a virtual private 
network access server of the private network over the public network using the 
communication device, the virtual private network server providing the external client 
access to the private network as though the extemal client is part of the private network; 

a specific act of the extemal client providing security to the connection through a 
communication protocol that resides at or above a socket layer in a protocol stack the 
extemal client uses to communicate data; 

a specific act of the extemal client maintaining a session that uses the secure 
connection to communicate with the private network; and 

during at least a portion of the specific act of the extemal client maintaining a 
session that uses the secure connection, a specific act of the communication device 
retaining the ability to establish a separate and distinct connection with another resource 
outside of the private network. 
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2. (Previously Presented) A method in accordance with Claim 1, further 
comprising: 

during at least a portion of the specific act of the external client maintaining a 
session that uses the secure connection, a specific act of establishing a connection with 
the resource outside of the private network. 

3. (Previously Presented) A method in accordance with Claim 1, wherein the 
specific act of the external client establishing a connection with the private network comprises: 

a specific act of using Transmission Control Protocol (TCP) to establish a 
connection with the private network. 

4. (Original) A method in accordance with Claim 3, wherein the specific act of 
the external client providing security to the connection comprises: 

a specific act of the external client using a Secure Socket Layer (SSL) protocol to 
provide security to the connection. 

5. (Canceled). 

6. (Original) A method in accordance with Claim 5, wherein the specific act of 
the extemal client providing security to the connection comprises: 

a specific act of the extemal client using a Secure Socket Layer (SSL) protocol to 
provide security to the connection. 

7. (Original) A method in accordance with Claim 5, wherein the specific act of 
the extemal client providing security to the connection comprises: 
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a specific act of the external client using a Wireless Transport Layer Security 
(WTLS) to provide security to the connection. 

8. (Canceled). 

9. (Previously Presented) A method in accordance with Claim 8, wherein the 
VPN access server is implemented on the same server machine as a proxy server that serves the 
private network. 

10. (Previously Presented) A method in accordance with Claim 8, wherein the 
VPN access server is implemented on a different server machine than a proxy server that serves 
the private network. ^ 

1 1 . (Original) A method in accordance with Claim 1 , wherein the public network 
comprises portions of the Litemet. 
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12. (Previously Presented) In a computer program product for use in a network 
environment that includes a public network and a private network, the public network including 
a client external to the private network, the computer program product for implementing a 
method of a communications device of the extemal client establishing a secure connection over a 
public network to the private network without restricting the communications device to working 
through the private network, the computer program product including a computer-readable 
medium having stored thereon computer-executable instructions for performing the following: 

a specific act of the extemal client establishing a connection with a virtual private 
network access server of the private network, over the public network using the 
communication device, the virtual private network server providing the extemal client 
access to the private network as though the extemal client is part of the private network; 

a specific act of the extemal client providing security to the connection through a 
communication protocol that resides at or above a socket layer in a protocol stack the 
extemal client uses to communicate data; 

a specific act of the extemal client maintaining a session that uses the secure 
connection to communicate with the private network; and 

during at least a portion of the specific act of the extemal client maintaining a 
session that uses the secure connection, a specific act of the communication device 
retaining the abihty to establish a separate and distinct connection with another resource 
outside of the private network. 

13. (Original) A computer program product in accordance with Claim 12, 
wherein the computer-readable media comprises a tangible computer readable medium. 

14. (Previously Presented) A computer program product in accordance with 
Claim 12, wherein the computer-executable instmctions for performing the specific act of the 
extemal client establishing a connection with the private network comprises a Transmission 
Control Protocol (TCP) module. 
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15. (Original) A computer program product in accordance with Claim 14, 
wherein the computer-executable instructions for performing a specific act of the external client 
providing security to the connection comprises a Secure Socket Layer (SSL) module. 

16. (Original) A computer program product in accordance with Claim 12, 
wherein the computer-executable instructions for performing a specific act of the extemal client 
providing security to the connection comprises a Secure Socket Layer (SSL) module. 

17. (Original) A computer program product in accordance with Claim 12, 
wherein the computer-executable instructions for performing a specific act of the extemal client 
providing security to the connection comprises a Wireless Transport Layer Security (WTLS) 
module. 

18. (Canceled). 
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19. (Previously Presented) In a network environment that includes a public 
network and a private network, the public network including a client external to the private 
network, a method of a communications device of the external client establishing a secure 
connection over a pubhc network to the private network without restricting the communications 
device to working through the private network, the method comprising the following: 

a step for securely connecting to a virtual private network access server of the 
private network through a communication protocol that resides at or above a socket layer 
in a protocol stack that the external client uses to communicate data in order to retain the 
ability to establish a separate and distinct connection with a resource outside of the 
private network, the virtual private network access server providing the external client 
access to the private network as though the external client is part of the private network; 
and 

while securely connected to the virtual private network access server, a specific 
act of accessing the resource outside of the private network. 

20. (Previously Presented) A method in accordance with Claim 19, wherein the 
step for securely connecting to the private network comprises the following: 

a specific act of the external client establishing a connection with the private 
network over the public network using the communication device; 

a specific act of the extemal cUent providing security to the connection; and 

a specific act of the extemal client maintaining a session that uses the secure 
connection to communicate with the private network. 

21. (Original) A method in accordance with Claim 11, wherein the public 
network comprises portions of the Intemet. 
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22. (Previously Presented) In a network environment that includes a public 
network and a private network connected to the public network, the public network including a 
client external to the private network, a method of a server computer system within a private 
network establishing a secure connection with a communications device of the external client 
without restricting the conmiunications device to working through the private network, the 
method comprising the following: 

a specific act of a virtual private network access server within the private network 
facilitating the establishment of a connection with the external client over the public 
network, the virtual private network server providing the extemal client access to the 
private network as though the extemal client is part of the private network; and 

a specific act of the server computer system facilitating the providing of security 
to the connection through a communication protocol that resides at or above a socket 
layer in a protocol stack used to communicate data, wherein the secure connection is 
established while allowing the extemal chent to maintain the ability to establish a 
separate and distinct connection directly with one or more extemal resources rather than 
having to route communication with the one or more extemal resources through the 
private network. 

23. (Previously Presented) A method in accordance with Claim 22, wherein the 
public network comprises portions of the Internet, 

24. (Original) A method in accordance with Claim 22, wherein the specific act of 
the server computer system facilitating the establishment of a connection with the extemal client 
comprises: 

a specific act of using Transmission Control Protocol (TCP), to facilitate the 
establishment of a connection with the extemal client. 
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25. (Original) A method in accordance with Claim 22, wherein the specific act of 
the server computer system facilitating the providing of security to the connection comprises: 

a specific act of using Secure Socket Layer (SSL), to facilitate the providing of 
security to the connection. 

26. (Original) A method in accordance with Claim 22, wherein the specific act of 
the server computer system facilitating the providing of security to the connection comprises: 

a specific act of using Wireless Transport Layer Security (WTLS), to facilitate the 
providing of security to the connection. 
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